Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

ansible-doc command for filters & plugins

E
emran last edited by

I would like to list & read documentation from the ansible-doc command for example about ipaddr or flatten.

Is it possible? Thanks in advance!
Reply Quote 0
1 Reply Last reply
jeanid last edited by
The command ansible-doc

Displays information on modules installed in Ansible libraries. It displays a terse listing of plugins and their short descriptions, provides a printout of their DOCUMENTATION strings ...

from the module source.

Therefore for https://docs.ansible.com/ansible/latest/user_guide/playbooks_filters.html like https://docs.ansible.com/ansible/latest/user_guide/playbooks_filters.html#managing-list-variables or https://docs.ansible.com/ansible/latest/user_guide/playbooks_filters_ipaddr.html there is no such command.

Further Information
- https://docs.ansible.com/ansible/latest/dev_guide/developing_modules_documenting.html#documentation-block
Reply Quote 0
1 Reply Last reply

ansible 552

2
Posts

0
Views

Suggested Topics

R

Install apache on awa ec2 from locally installed ansible server on my laptop
Continuous Integration and Delivery (CI, CD) • ansible amazon ec2 apache httpd • • rosemadder

2

0
Votes

2
Posts

1
Views

You need to put public ip address or hostname assigned by aws ec2 service, if your aws ec2 instance is public. If your aws ec2 instance is located in vpc, you won't be able to connect it directly. Either you need to setup routing through internet gateway or you have to setup ansible server in vpc.
J

How to have Ansible move a microservice?
Continuous Integration and Delivery (CI, CD) • ansible microservices • • Jolied

2

0
Votes

2
Posts

1
Views

I have created a demo with a role that can install many springboot microservices on a fleet of VMs where you name a subset of the VMs where you want to place each service. The playbook can then run on all hosts, compute whether each service should be on each host, and will either run the install.yaml or uninstall.yml tasks. To install two of the same microservices with different runtime args you play something like: roles: - { role: "ansible-role-springboot", sb_app_name: "microservices-registration", sb_app_group_id: "org.springframework.samples.service.service", sb_app_artifact_id: "microservices-demo", sb_app_version: "2.0.0.RELEASE", sb_app_run_args: '"registration 8082"', sb_app_healthcheck_urls: [ "http://localhost:8082/actuator/health" ], sb_hosts: [ "my-test-vm" ] } - { role: "ansible-role-springboot", sb_app_name: "microservices-web", sb_app_group_id: "org.springframework.samples.service.service", sb_app_artifact_id: "microservices-demo", sb_app_version: "2.0.1.RELEASE", sb_app_run_args: '"web 8083"', sb_app_healthcheck_urls: [ "http://localhost:8083/actuator/health" ], sb_hosts: [ "my-test-vm" ] } The role is based upon orachide/ansible-role-springboot which seems very comprehensive. The new bit is in bold which is simply a list of host that should run the microservice. Normally we would expect to use different artefact ids and versions each time we apply the role. In the example above, it is running an official springboot microservices mega jar that takes different RUN_AS args to run as different services. That seems a bit odd and not something I would recommend yet the role is agnostic to such details. What thing that the original role requires is that you use an executable jar file: <plugin> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-maven-plugin</artifactId> <configuration> <executable>true</executable> </configuration> </plugin> It role will create a symlink to that executable and create an environment files to run it and all that good stuff. The modifications that I made were quite simple as the original role has logic to install or uninstall based on sb_app_state: - import_tasks: install.yml when: > sb_app_state == 'present' - import_tasks: uninstall.yml when: > sb_app_state == 'absent' So it was simply a matter of adding some logic to check whether the current hostname is in the sb_hosts list then update the value of sb_app_state as appropriate. That is done with a single line change. The demo codebase uses test kitchen ansible with testinfra to unit test that the playbook works. Getting that working was well worth the effort to do automated acceptance tests of the playbook logic.
Configuring Zookeeper from Ansible
Continuous Integration and Delivery (CI, CD) • ansible jinja templating zookeeper • • inna

2

0
Votes

2
Posts

1
Views

P

In lack of a better idea I chose this rather long approach: myid.j2 {% for host in groups['zookeeper'] %} {% if host == inventory_hostname %} {{ loop.index }} {% endif %} {% endfor %} The idea is to iterate over all hosts and check if the current host being processed matches the host in the list of hosts. If it matches I write the iteration counter to the file. When I ssh into the boxes I can see their myid files were created according to my need: [root@quorumandmonitoring data]# cat myid 5
A

Why apt command stuck with Waiting for headers in docker?
Continuous Integration and Delivery (CI, CD) • docker • • authera

2

0
Votes

2
Posts

1
Views

G

Ok, it seems that the default docker MTU (1500) is not acceptable for me because I use a PPPoE Internet connection on the host on which I run the docker service: ip addr show eth0 48: eth0@if49: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default link/ether 02:42:ac:12:00:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0 inet 172.18.0.2/16 brd 172.18.255.255 scope global eth0 valid_lft forever preferred_lft forever The solution is to create the network with an appropriate MTU: docker network create --opt com.docker.network.driver.mtu=1492 albums-webapp docker network inspect albums-webapp | grep -i mtu Be aware that while no container is running the command below will still show the 1500 MTU: ip link show | grep 4d725814c237 | grep mtu Be also aware that newly created network must be allowed to go outside - so check it also with the firewall. Also see the related issue: https://github.com/moby/moby/issues/28314
E

variables in Ansible
Software Programming • ansible • • esther

2

0
Votes

2
Posts

0
Views

A

Anyway, I figured out:tasks: - name: Import any.yml include_vars: file: ./any.yml name: var name: Debug debug: msg: "{{ var.param.name }}"
E

How do you put the variable in the name of the task?
Software Programming • ansible • • emran

2

0
Votes

2
Posts

0
Views

K

No. The heading of the task is formed before the cycle is established and is one for all elements.For your task, the parameter will be more appropriate. label of http://docs.ansible.com/ansible/latest/playbooks_loops.html#loop-control ♪- name: "build with cargo" shell: | cd ~/.local/src/rust/{{ item.dir }} cargo build --release with_items: "{{ rust.gits }}" loop_control: label: "{{ item.dir }}"
A

Ansible cloudformation vs cloudformation
Continuous Integration and Delivery (CI, CD) • ansible infrastructure as code aws cloudformation • • Amritpal

2

0
Votes

2
Posts

1
Views

You wouldn't need to use Ansible for AWS cloudformation if you are fine with just using AWS cloudformation. Ansible integrated AWS cloudformation so that you can convert your local Ansible files into an AWS cloudformation easily. I'd suggest using Ansible since it provides a great way to test your stacks locally and then you would make the conversion to AWS cloudformation when ready. This is usage dependent however.
C

Ansible: Detecting in parent role when meta dependency role had change
Continuous Integration and Delivery (CI, CD) • ansible • • Cleofas

2

0
Votes

2
Posts

1
Views

M

I think you can use listen as explained here: https://medium.com/@george.shuklin/listen-feature-for-handlers-in-ansible-29183524c7e1
D

What is a good strategy to prevent Ansible playbook runs against the wrong hosts?
Continuous Integration and Delivery (CI, CD) • ansible firewall ansible inventory • • Duquan

2

0
Votes

2
Posts

2
Views

R

Q: "Disable communication to all the systems you do not want to update." A: The only safe way is to physically isolate such https://docs.ansible.com/ansible/latest/tips_tricks/ansible_tips_tricks.html#separate-production-and-staging-inventory . A firewall might be an option. But, it's not feasible if you want to keep ssh or other https://docs.ansible.com/ansible/latest/inventory_guide/connection_details.html#connection-methods-and-details that Ansible might use. On the configuration level, there are many options. 1) Special user Create a special user for this purpose on the systems you want to update. For example user ansible_update. Depending on your https://docs.ansible.com/ansible/latest/tips_tricks/ansible_tips_tricks.html#separate-production-and-staging-inventory configure the https://docs.ansible.com/ansible/latest/reference_appendices/config.html#default-remote-user to ansible_update. This way you make sure no other systems can be connected by mistake. In addition to this, you control who can connect to these systems by putting their public keys into the authorized_keys of the user ansible_update at the remote hosts. To enforce this you have to: monitor users at the remote hosts and their authorized_keys scan your project (playbooks, roles, inventory, configuration) for remote users other than ansible_update 2) Bastion host A better option is creating a https://en.wikipedia.org/wiki/Bastion_host and making it the only source of the configuration for the environment. 3) ansible-pull The most flexible option is configuring the remote hosts to https://docs.ansible.com/ansible/latest/cli/ansible-pull.html their updates on their own. Conclusion: Create special users, create a bastion host, and make the remote hosts pull the updates from it.
What are minimum permissions required for an IAM user to provision EC2 instances?
Continuous Integration and Delivery (CI, CD) • ansible amazon web services amazon ec2 aws iam provisioning • • Mystic

2

0
Votes

2
Posts

0
Views

S

quick answer: - The user will need the permissions to execute the https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/run-instances.html command. Explanation on how to do this: First create a policy (not Role) that authorizes the https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html (find it in the table in the middle of the link). The EC2 RunInstances action requires access to many resources and you need to define which resources to maintain https://en.wikipedia.org/wiki/Principle_of_least_privilege . Review this https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ExamplePolicies_EC2.html#iam-example-runinstances explaining RunInstances and resource permissions needed. It also includes some example policies. Note: AWS doesn't allow https://stackoverflow.com/questions/55222570/can-roles-be-assigned-to-users-and-groups-in-aws . Instead, the user would to assume the role where you have added your new policy to that role, or the user would be added to an iam user group that had your new policy added to the permission policies. ====== To double check this works, I followed these steps: Created a simple iam user with cli access: userX Created a new iam policy using the visual editor that can access RunInstances action with any resource ( https://en.wikipedia.org/wiki/Principle_of_least_privilege for you in production, but ok for testing) : EC2RunInstancesAllResourcesPolicy Created an iam user group: RunInstanceAdminGroup Added EC2RunInstancesAllResourcesPolicy to the RunInstanceAdminGroup user group Added userX to the RunInstanceAdminGroup ran the ec2 run-instances command from the cli using userX credentials and it succeeded!
M

Is there an ansible module that check whether a port is not in LISTEN state?
Continuous Integration and Delivery (CI, CD) • ansible certbot • • meriah

2

0
Votes

2
Posts

1
Views

D

I think you're looking for the wait_for module. It will allow you to check and make an action when a certain port is available and more.
S

How to properly automate CM based on log events?
Continuous Integration and Delivery (CI, CD) • jenkins ansible jenkins pipeline configuration management • • Saumya

2

0
Votes

2
Posts

1
Views

There is a natural tension here between: (a) fixing something that is wrong automatically: because for example, a CVE has been created with a high enough severity to need to do something about it. (b) breaking the system: because the automation introduced a breaking change or a defect. I have a tendency towards systems being under constant development, even if no features are being added to them they need to kept current to avoid exposure to vulnerabilities. The rate of change to the 3rd party components of the majority of systems I cover is so high that's its actually worth rebuilding everything and redeploying it daily. This introduces a couple of requirements: It is highly automated, 99% of user journies are covered by end-to-end tests so each build has a high degree of confidence that it will work, We don't roll out to all users, we employ canary release and a rollback mechanism, We use version constraints in package manifests, etc... i.e. the version of React must be >= 16.7.1 and < 17.0.0 We manage by exception, i.e. if the end-to-end tests fail or the canary release fails humans get involved. This, in turn, makes systems like trivy, OWASP ZAP and SonarQube more about generating metrics and stopping vulnerabilities from going live than triggering automated remediation. We do then have a set of rules like: The live application must not have an unmitigated CVE with a CVSS score of 7.0 or higher. The list of CVEs with a score of 4.0 or higher will be reviewed on a weekly basis to assess if remediation should be undertaken (i.e. change to a different library, introduce a new safeguard, remove a defunct library, fix the CVE at source, etc.) This then gives my SRE teams the operational boundaries to work within, they may in practice: just re-run the deployment ad-hoc to fix it now rather than within 24h, override a default, for example, if there is a known vulnerability deploy something with a less critical but still higher than CVSS 7.0 known vulnerability, Introduce a new safeguard, i.e. a Web Application Firewall Rule to mitigate, Swap out the dependency for something less vulnerable, Disable that functionality entirely until a fix can be introduced.
B

copy contents of file on ansible server to another file on remote servers
Continuous Integration and Delivery (CI, CD) • linux centos ansible • • baileigh

2

0
Votes

2
Posts

1
Views

C

Copy module should work - hosts: all tasks: - copy: src: /data/new_config dest: /opt/zservice/etc/config owner: root group: wheel mode: '0750' backup: yes If you worry about the number of the hosts take a look at serial.
O

Jenkins Git Client Plugin Issue
Continuous Integration and Delivery (CI, CD) • git jenkins jenkins plugins • • Oba22

2

0
Votes

2
Posts

1
Views

E

Solutions: You have a few choices to resolve the security issue in git client plugin 3.0.0-rc. 1) Install git plugin 3.12.1 and git client plugin 2.8.5 from the Jenkins update center 2) Upload git plugin 3.12.1 and git client plugin 2.8.6 into your Jenkins server from the "Advanced" tab of the "Manage Plugins" page inside "Manage Jenkins". 3)Install git plugin 4.0.0-beta11 and git client plugin 3.0.0-beta11 from the Jenkins experimental update center. 4)Upload git plugin 4.0.0-beta11 and git client plugin 3.0.0-beta11 into your Jenkins server from the "Advanced" tab of the "Manage Plugins" page inside "Manage Jenkins" If you choose git plugin 3.12.1, you are choosing the released git plugin and the most stable. If you choose git plugin 4.0.0-beta11, you are choosing the most recent pre-release git plugin with more bug fixes than are available in git plugin 3.12.1. Reference: Git Client Plugin GitHub Link Plugin manual download Related Issue : https://issues.jenkins-ci.org/browse/JENKINS-59336
B

Applying ansible playbook to a docker container on a remote host
Continuous Integration and Delivery (CI, CD) • docker ansible • • baileigh

2

0
Votes

2
Posts

1
Views

With the help of @Levi (refered to Stackoverflow) I managed to find a way to connect straigt into the docker containers using ansibles docker connection driver and the remote API capability of Docker. First of all you have to expose the API which is by default not the case. Simply add -H tcp://0.0.0.0:1337 to the ExecStart constant of the systemd script. Then reload the start script and restart the docker service. (From this blogpost) Then you can list the containers in the inventory file like this: [containers] container-name ansible_connection=docker ansible_docker_extra_args="-H tcp://1.2.3.4:1337" And execute any playbook like your used to. ansible-playbook -i docker_inventory playbooks/my_playbook.yml The upside of this way of implementing it this way is that you can mix up "real" hosts/vms that are maintained through SSH and Docker containers. One negative thing I have to mention is that the docker API is much slower than using SSH as a control tunnel. This setup is of cause horribly insecure and its only purpose is to explain the concept. Before using it in production you should read into the security features and limit access to the daemon as far as possible.

ansible-doc command for filters & plugins

Suggested Topics

Install apache on awa ec2 from locally installed ansible server on my laptop Continuous Integration and Delivery (CI, CD) • ansible amazon ec2 apache httpd • • rosemadder

How to have Ansible move a microservice? Continuous Integration and Delivery (CI, CD) • ansible microservices • • Jolied

Configuring Zookeeper from Ansible Continuous Integration and Delivery (CI, CD) • ansible jinja templating zookeeper • • inna

Why apt command stuck with Waiting for headers in docker? Continuous Integration and Delivery (CI, CD) • docker • • authera

variables in Ansible Software Programming • ansible • • esther

How do you put the variable in the name of the task? Software Programming • ansible • • emran

Ansible cloudformation vs cloudformation Continuous Integration and Delivery (CI, CD) • ansible infrastructure as code aws cloudformation • • Amritpal

Ansible: Detecting in parent role when meta dependency role had change Continuous Integration and Delivery (CI, CD) • ansible • • Cleofas

What is a good strategy to prevent Ansible playbook runs against the wrong hosts? Continuous Integration and Delivery (CI, CD) • ansible firewall ansible inventory • • Duquan

What are minimum permissions required for an IAM user to provision EC2 instances? Continuous Integration and Delivery (CI, CD) • ansible amazon web services amazon ec2 aws iam provisioning • • Mystic

Is there an ansible module that check whether a port is not in LISTEN state? Continuous Integration and Delivery (CI, CD) • ansible certbot • • meriah

How to properly automate CM based on log events? Continuous Integration and Delivery (CI, CD) • jenkins ansible jenkins pipeline configuration management • • Saumya

copy contents of file on ansible server to another file on remote servers Continuous Integration and Delivery (CI, CD) • linux centos ansible • • baileigh

Jenkins Git Client Plugin Issue Continuous Integration and Delivery (CI, CD) • git jenkins jenkins plugins • • Oba22

Applying ansible playbook to a docker container on a remote host Continuous Integration and Delivery (CI, CD) • docker ansible • • baileigh

Install apache on awa ec2 from locally installed ansible server on my laptop
Continuous Integration and Delivery (CI, CD) • ansible amazon ec2 apache httpd • • rosemadder

How to have Ansible move a microservice?
Continuous Integration and Delivery (CI, CD) • ansible microservices • • Jolied

Configuring Zookeeper from Ansible
Continuous Integration and Delivery (CI, CD) • ansible jinja templating zookeeper • • inna

Why apt command stuck with Waiting for headers in docker?
Continuous Integration and Delivery (CI, CD) • docker • • authera

variables in Ansible
Software Programming • ansible • • esther

How do you put the variable in the name of the task?
Software Programming • ansible • • emran

Ansible cloudformation vs cloudformation
Continuous Integration and Delivery (CI, CD) • ansible infrastructure as code aws cloudformation • • Amritpal

Ansible: Detecting in parent role when meta dependency role had change
Continuous Integration and Delivery (CI, CD) • ansible • • Cleofas

What is a good strategy to prevent Ansible playbook runs against the wrong hosts?
Continuous Integration and Delivery (CI, CD) • ansible firewall ansible inventory • • Duquan

What are minimum permissions required for an IAM user to provision EC2 instances?
Continuous Integration and Delivery (CI, CD) • ansible amazon web services amazon ec2 aws iam provisioning • • Mystic

Is there an ansible module that check whether a port is not in LISTEN state?
Continuous Integration and Delivery (CI, CD) • ansible certbot • • meriah

How to properly automate CM based on log events?
Continuous Integration and Delivery (CI, CD) • jenkins ansible jenkins pipeline configuration management • • Saumya

copy contents of file on ansible server to another file on remote servers
Continuous Integration and Delivery (CI, CD) • linux centos ansible • • baileigh

Jenkins Git Client Plugin Issue
Continuous Integration and Delivery (CI, CD) • git jenkins jenkins plugins • • Oba22

Applying ansible playbook to a docker container on a remote host
Continuous Integration and Delivery (CI, CD) • docker ansible • • baileigh